TekRADIUS Forum

20.08.2010 23:32:03 Warnielle Posts: 1	Hello, I know the difference between versions 3.6 and 3.7, do I use the 3.4 and wanted to know what's changed in new versions.
	0 • permalink
21.08.2010 18:18:42 Admin Administrator Posts: 1684	• Version 3.7 - Log files are kept in <Application Directory>\Logs directory and rotated daily. • Version 3.7 - You can define a “default” user profile to be used when a matching user profile cannot be found for an incoming RADIUS authentication request. TekRADIUS manual for configuring this feature. • Version 3.6 - You can specify credit limits for daily, weekly or monthly periods and you can run and check result of an external executable (External-Executable) as a check item. See TekRADIUS manual for configuring these features. • Version 3.5 - Generate-MS-MPPE-Keys usage has been changed in version 3.5. See TekRADIUS manual for details. • Version 3.5 - Version 3.5 introduces two new attributes; Failure-Reply-Type and Secondary-Group. You can have a secondary group membership for a user other than user's default group. If you add this attribute to user's profile, TekRADIUS will try to authenticate incoming access-request with user attributes and primary group attributes first and if it fails, TekRADIUS will try to authenticate again with user attributes and secondary group attributes. Secondary-Group is a string type attribute and can exist only as a check attribute in user profiles. Secondary-Group is not supported with PEAP authentication. You can add Failure-Reply-Type attribute as a check attribute to user or group profiles. This attribute alter behavior of TekRADIUS when Failure-Reply attributes exists in user or group profile. You can set its value to Accept or Reject. When you set its value to Accept, Failure-Reply attributes are sent in an Access-Accept and if you set its value to Reject, Failure-Reply attributes are sent in an Access-Reject message. If this attribute does not exist in user or group profile and Failure-Reply attributes are configured, TekRADIUS will send Failure-Reply attributes in an Accepts-Accept message. Failure-Reply-Type is a integer type attribute and can exist only as a check attribute in user profiles. • Version 3.5 - You can also specify your own delimiter character to be used to enter string type multiple instance reply attributes in user or group profiles. Its default value is semi-colon “;”. You can set it Settings / SQL Connection tab. • Version 3.4 - A new reply type is introduced in version 3.4. If you would like to provide restricted access to unauthenticated users add Failure-Reply attributes to user or group profiles. TekRADIUS will reply with Access-Accept containing Failure-Reply attributes if user or group profile has Failure-Reply attributes when authentication fails. If user or group profile has not Failure-Reply attributes, TekRADIUS will reply with Access-Reject message (This feature is not available for PEAP authentication, VPN authentication and when authentication failure caused by invalid authentication method). Use this feature with extreme care; if Default user group has Failure-Reply attributes, all failed authentication attempts will be replied by Access-Accept messages containing Failure-Reply attributes. When a user is authorized with Failure-Reply Simultaneous-Use, Expire-Date, Login-Time, TekRADIUS-Status and Quota check will not be done. edited by admin on 21.08.2010
	0 • permalink

---